opnsense-src/sys/security/mac
Konstantin Belousov 940cb0e2bb Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.
Add MAC framework entries for posix shm read and write.

Do not allow implicit extension of the underlying memory segment past
the limit set by ftruncate(2) by either of the syscalls.  Read and
write returns short i/o, lseek(2) fails with EINVAL when resulting
offset does not fit into the limit.

Discussed with:	alc
Tested by:	pho
Sponsored by:	The FreeBSD Foundation
2013-08-21 17:45:00 +00:00
..
mac_atalk.c Continue work to optimize performance of "options MAC" when no MAC policy 2009-06-03 18:46:28 +00:00
mac_audit.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_cred.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_framework.c put sys/systm.h at its proper place or add it if missing 2011-12-12 10:05:13 +00:00
mac_framework.h Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. 2013-08-21 17:45:00 +00:00
mac_inet.c Continue work to optimize performance of "options MAC" when no MAC policy 2009-06-03 18:46:28 +00:00
mac_inet6.c Continue work to optimize performance of "options MAC" when no MAC policy 2009-06-03 18:46:28 +00:00
mac_internal.h Add an extra comment to the SDT probes definition. This allows us to get 2010-08-22 11:18:57 +00:00
mac_label.c Introduce accessor functions mac_label_get() and mac_label_set() to replace 2007-02-06 14:19:25 +00:00
mac_net.c - Improve BPF locking model. 2012-04-06 06:53:58 +00:00
mac_pipe.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_policy.h Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. 2013-08-21 17:45:00 +00:00
mac_posix_sem.c Add the fo_chown and fo_chmod methods to struct fileops and use them 2011-08-16 20:07:47 +00:00
mac_posix_shm.c Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. 2013-08-21 17:45:00 +00:00
mac_priv.c Revert the approach for skipping lockstat_probe_func call when doing 2011-12-12 23:29:32 +00:00
mac_process.c Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lock 2013-06-04 17:23:09 +00:00
mac_socket.c Continue work to optimize performance of "options MAC" when no MAC policy 2009-06-03 18:46:28 +00:00
mac_syscalls.c Remove the support for using non-mpsafe filesystem modules. 2012-10-22 17:50:54 +00:00
mac_system.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_sysv_msg.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_sysv_sem.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_sysv_shm.c Rename MAC Framework-internal macros used to invoke policy entry points: 2009-05-01 21:05:40 +00:00
mac_vfs.c Add missing DTrace probe invocation to mac_vnode_check_open; the probe 2010-10-23 16:59:39 +00:00